Privacy Policy

This policy explains what personal information Kalahari HR collects, why we collect it, who we share it with, and the rights you have over it.

Last updated: 27 July 2026

1. Who we are

Kalahari HR is a human resources management platform operated by Innovateium (Pty) Ltd, registered in Botswana, with offices at Plot 54358, CBD, Gaborone, Botswana (“Kalahari HR”, “we”, “us”).

This policy explains what personal information we handle, why we handle it, and what rights you have. It applies to our website and to the Kalahari HR application.

Two roles. When you visit our website or create an account, we act as the controller of your information. When your employer uses Kalahari HR to manage its workforce, your employer is the controller of that employee data and we act as a processor on their instructions. If you are an employee with a question about your records, please contact your HR department first.

2. Information we collect

Account information. Your name, email address, profile image, password hash, and authentication factors such as two-factor secrets and registered passkeys.

Sign-in through Google or LinkedIn. If you sign in with a social provider, we receive your name, email address and profile picture from that provider. We never receive your password for that account.

Organisation and workforce data. Employee records, job and salary details, leave requests and balances, attendance records, payroll runs and payslips, and recruitment applications entered by your organisation.

Billing information. Subscription plan, billing status and invoice history. Card details are collected and stored by our payment processor, not by us.

Technical information. IP address, browser and device type, session records, and product usage analytics.

Communications. Messages you send through our contact form or support channels.

3. How we use information

  • To provide, operate and maintain the Kalahari HR platform
  • To authenticate you and keep accounts secure, including two-factor and passkey verification
  • To calculate payroll, statutory deductions and leave entitlements on behalf of your organisation
  • To process subscription payments and issue invoices
  • To send service messages such as email verification, password resets and organisation invitations
  • To provide support and respond to your enquiries
  • To detect, investigate and prevent fraud, abuse and security incidents
  • To improve the product through aggregated, non-identifying usage analysis
  • To comply with legal obligations that apply to us

5. Who we share it with

We do not sell personal information. We share it only with:

  • Your organisation. Administrators and managers in your organisation can see the records their role permits.
  • Service providers. Our hosting, database, transactional email and payment processing partners, each bound by contract to protect your data and use it only to provide their service to us.
  • Authorities. Where we are legally required to disclose information, or to protect our rights, users or the public.
  • A successor entity. If our business is merged or acquired, subject to this policy continuing to apply.

6. How long we keep it

We keep account information for as long as your account is active. When you delete your account, we remove your personal profile data.

Workforce and payroll records are retained for as long as your organisation's subscription is active, and after termination for the period required by Botswana employment and tax law. Backups are cycled out on a rolling schedule.

7. How we protect it

Data is encrypted in transit. Passwords are stored as salted hashes and never in plain text. Access to production data is restricted to authorised personnel.

Your account supports two-factor authentication, passkeys and active session management — we strongly recommend enabling them from your profile settings.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authority as required by law.

8. Your rights

Subject to the Data Protection Act, 2018, you may:

  • Ask what personal information we hold about you and request a copy
  • Ask us to correct information that is inaccurate or incomplete
  • Ask us to delete your personal information where we have no continuing lawful reason to keep it
  • Object to or ask us to restrict certain processing
  • Withdraw consent you previously gave
  • Lodge a complaint with the Information and Data Protection Commission

To exercise any of these, email hello@kalaharihr.co.bw. If your data was entered by your employer, we will refer your request to them.

9. Cookies

We use a small number of cookies, and we do not use advertising cookies.

  • Strictly necessary. Session and authentication cookies that keep you signed in and protect against request forgery. The product does not work without these.
  • Preferences. Cookies that remember choices such as your theme.
  • Analytics. Aggregated measurement of page performance and feature usage, used to improve the product.

You can clear or block cookies in your browser settings. Blocking strictly necessary cookies will prevent you from signing in.

10. International transfers

Some of our service providers process data outside Botswana. Where that happens, we require appropriate safeguards by contract so that your information keeps an equivalent level of protection.

11. Children's data

Kalahari HR is a workplace product and is not directed at children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the product and the law change. We will update the “last updated” date above and, for material changes, notify account holders by email.

13. Contact us

Questions about this policy or how we handle your information? Email hello@kalaharihr.co.bw, call +267 391 0000, or use our contact form.

Postal address: Plot 54358, CBD, Gaborone, Botswana